API - CVE CyberSecurity Database News (Page 66)

Feb 13, 2025 API Exploit

CVE-2024-7102 - Triggering Pipelines as Another User in GitLab (Root Cause, Exploit, and Secure Your DevOps)

Published: June 2024 Author: [Your Name] What is CVE-2024-7102? A major security issue—CVE-2024-7102—has hit GitLab Community Edition (CE) and

Feb 12, 2025 API

CVE-2025-25205 - How Audiobookshelf’s Regex Flaw Exposed Protected Data and Crashed Servers

Audiobookshelf is popular among self-hosters for managing audiobooks and podcasts at home, giving you a slick library and mobile streaming. But in early 2024,

Feb 12, 2025 Windows Microsoft API Exploit

CVE-2025-25199 - Memory Leak Vulnerability in go-crypto-winnative’s CNG TLS1PRF Function on Windows

Summary: A memory leak bug (CVE-2025-25199) was discovered in Microsoft’s go-crypto-winnative—the Go crypto backend for Windows using Cryptography API:

Feb 12, 2025 CSRF API Exploit

CVE-2025-25743 - New Command Injection Flaw in D-Link DIR-853 A1 (FW1.20B07) – Detailed Analysis & Exploitation

In early 2025, a severe vulnerability was found in the D-Link DIR-853 A1 router, running firmware version 1.20B07. Tracked as CVE-2025-

Feb 12, 2025 API Exploit OAuth

CVE-2025-0516 - Exploiting Improper Authorization in GitLab CE/EE - How Limited Users Gain Unauthorized Access to Critical Project Data

On January 18, 2025, GitLab published an advisory for CVE-2025-0516, which discloses a serious improper authorization vulnerability in both GitLab Community Edition (CE)